Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026
CVE-2004-2069
CVE-2004-2069
Description
sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: =3.6.1p2, =3.7.1p2
Patches
Vulnerability mechanics
References
23- marc.infonvd
- marc.infonvd
- rhn.redhat.com/errata/RHSA-2005-550.htmlnvd
- secunia.com/advisories/17000nvd
- secunia.com/advisories/17135nvd
- secunia.com/advisories/17252nvd
- secunia.com/advisories/22875nvd
- secunia.com/advisories/23680nvd
- support.avaya.com/elmodocs2/security/ASA-2005-216.pdfnvd
- support.avaya.com/elmodocs2/security/ASA-2005-223.pdfnvd
- www.osvdb.org/16567nvd
- www.securityfocus.com/archive/1/425397/100/0/threadednvd
- www.securityfocus.com/archive/1/451404/100/0/threadednvd
- www.securityfocus.com/archive/1/451417/100/200/threadednvd
- www.securityfocus.com/archive/1/451426/100/200/threadednvd
- www.securityfocus.com/bid/14963nvd
- www.vmware.com/download/esx/esx-202-200610-patch.htmlnvd
- www.vmware.com/download/esx/esx-213-200610-patch.htmlnvd
- www.vmware.com/support/vi3/doc/esx-3069097-patch.htmlnvd
- www.vmware.com/support/vi3/doc/esx-9986131-patch.htmlnvd
- www.vupen.com/english/advisories/2006/4502nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/20930nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541nvd
News mentions
0No linked articles in our index yet.